twigphp Twig up to 3.11.1/3.14.0 __toString exposure of resource

Summaryinfo

A vulnerability classified as problematic has been found in twigphp Twig up to 3.11.1/3.14.0. Affected is the function __toString. Performing a manipulation results in exposure of resource. This vulnerability is cataloged as CVE-2024-51754. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in twigphp Twig up to 3.11.1/3.14.0. This affects the function __toString. The manipulation with an unknown input leads to a exposure of resource vulnerability. CWE is classifying the issue as CWE-668. The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. This is going to have an impact on confidentiality. The summary by CVE is:

Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the security policy when the object is part of an array or an argument list (arguments to a function or a filter for instance). This issue has been patched in versions 3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2024-51754 since 10/31/2024. The exploitability is told to be difficult. It is possible to initiate the attack remotely. Additional levels of successful authentication are needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 231902 (Linux Distros Unpatched Vulnerability : CVE-2024-51754), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.11.2 or 3.14.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (231902). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• twigphp

Name

• Twig

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.11.0
• 3.11.1
• 3.12
• 3.13
• 3.14.0

Website

• Product: https://github.com/twigphp/Twig/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion